General
- Target 2026-04-17_93a6542cb3d191a443cf3e177b3bd8b3_elex_mafia_rhadamanthys_stealc_stop_tofsee
- Size 200KB
- Sample260417-esae8ae13l
- SHA256 1d14dfc6c4be94535598c9334e661b5a510a187553908b300c160c140e93d9d1
- MD5 93a6542cb3d191a443cf3e177b3bd8b3
- SHA1 f6c041bbc9b87538eca785f534190d8c04fd007c
- SHA512 a1eb87e3c6618802dbbe0acaf3cdc1979209291800ef3313fb20bc6d8048f4846a4412350c1b71d0c8979e36b65e0cd15c064f8ebf2c5202807cee27d953bb9b
- SSDEEP 3072:mW0005KJpBpPrEU2JOMRnlNi3MGQ6JsIo1+XDiJcp8:mW0MBpIn0MPI32WsR18GKp8
- TLSH T160147C353281C033D96715748EE8C77A5ABEB83207A554CBB7E40B799F643E28B3534A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-17_93a6542cb3d191a443cf3e177b3bd8b3_elex_mafia_rhadamanthys_stealc_stop_tofsee.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-17_93a6542cb3d191a443cf3e177b3bd8b3_elex_mafia_rhadamanthys_stealc_stop_tofsee.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-17_93a6542cb3d191a443cf3e177b3bd8b3_elex_mafia_rhadamanthys_stealc_stop_tofsee
- Size 200KB
- SHA256 1d14dfc6c4be94535598c9334e661b5a510a187553908b300c160c140e93d9d1
- MD5 93a6542cb3d191a443cf3e177b3bd8b3
- SHA1 f6c041bbc9b87538eca785f534190d8c04fd007c
- SHA512 a1eb87e3c6618802dbbe0acaf3cdc1979209291800ef3313fb20bc6d8048f4846a4412350c1b71d0c8979e36b65e0cd15c064f8ebf2c5202807cee27d953bb9b
- SSDEEP 3072:mW0005KJpBpPrEU2JOMRnlNi3MGQ6JsIo1+XDiJcp8:mW0MBpIn0MPI32WsR18GKp8
- TLSH T160147C353281C033D96715748EE8C77A5ABEB83207A554CBB7E40B799F643E28B3534A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.